Is bdmahfijur.vercel.app legit & safe? 65/100

Overview

This website is a personal portfolio for an individual digital marketer, Mahfijur Rahman, who presents himself as a freelance specialist in YouTube promotion and SEO, Google Ads, Meta Ads and website SEO. The homepage carries a biography, resume and education timeline, certificates, a services section with monthly pricing plans, portfolio items, client testimonials, and a single contact and hire-request form with WhatsApp contact details. The apparent business model is freelance or small-agency lead generation, with revenue from client engagements and recurring service plans.

Scam/Impersonation Risk

No contradictions were observed. There is no brand impersonation, no phishing behaviour, no login or credential-capture form, and no conflicting legal identities, and no external threat source flags the site. The page makes no financial, investment or crypto claims, and the visible activity is limited to a contact and hire-request form that does not collect sensitive data. The main caution is the unverifiable self-promotion. The homepage advertises "1000+ Happy Clients" and "1500+ Completed Projects", and it shows two inconsistent experience counters, "5+ Years of Experience" and "4+ Years Exp.". The biography also places the individual in Rangpur, Bangladesh, at 27 years old. These are marketing assertions that no independent source on the site backs up. They are ordinary for a freelancer's self-presentation, but they cannot be treated as evidence of track record without outside corroboration. Evidence:

• Homepage hero statistics claim "1000+ Happy Clients" and "1500+ Completed Projects" with no named clients or linked case studies in the captured content.
• The homepage shows two different experience figures ("5+ Years of Experience" and "4+ Years Exp."), a minor internal inconsistency in self-reported credentials.
• The single page form is a contact and hire-request form. Behavioural testing found no external form destinations, hidden forms, wallet prompts, clipboard manipulation or cloaking.

Regulatory Verification Notes

The site is an individual's personal portfolio and is not presented as a regulated financial or licensed entity. It makes no licence claims, and none are expected for freelance marketing services. The site identifies a named individual with a personal biography and education history, but it does not name a registered company or business entity. Real-world identity therefore remains unconfirmed, and the site's own claims cannot stand in for confirmation. The site is served from a free subdomain on a shared application-hosting platform rather than a dedicated, independently registered domain. That limits what can be inferred about the owner from the domain alone. No third-party broker or regulatory record matched this site, so there is no external reputational signal in either direction. Evidence:

• The About and Resume sections name the individual and describe schooling and a business degree, but give no company name, registration number or business address.
• Origin server hosted in the United States on AS16509 (AMAZON-02 - Amazon.com, Inc.).
• Transport encryption uses a domain-validated certificate (DV) issued by WR1, valid to 2026-11-27. It secures the connection but does not attest to the operator's identity.
• No licence or regulatory claim appears on the homepage, so there is nothing on the site to cross-check against a registry.

What to Verify Next

Before a paid engagement, the claimed client volume and results should be tested against checkable references. Reasonable steps are to request two or three named past clients who can confirm the work, to check that the listed certificates can be validated with their issuing platforms, and to confirm that the advertising-platform expertise matches live, inspectable channels or campaigns. Identity should be confirmed through an independent route, such as a live video call or a profile on an established freelance marketplace that holds its own identity checks. The official support and contact channels should also be confirmed independently. Scope, deliverables and pricing should be agreed in a written contract before any payment is made. Evidence:

• The Certificates and Portfolio sections list credentials and work samples that can be checked with issuers or the clients concerned.
• The Service section advertises tiered monthly plans, so deliverables and cancellation terms should be fixed in writing.
• The testimonials on the homepage carry no verifiable links, so they should not be relied on as references.

Summary Verdict

The available evidence is consistent with a genuine, low-risk freelance portfolio site, with substantial and coherent content, benign behaviour, and clean results across external threat checks. The operator's real-world identity is not independently established, which holds the site at a moderate level of trust instead of a high one. No active threat signals were found.

Infrastructure Integrity

The site sits behind mainstream protective infrastructure from Cloudflare and Vercel, and the origin server was not exposed in the analysis. Both providers are well-established and trusted, and this is a mitigating factor only, not proof of legitimacy. A notable number of abuse reports exist against one of the shared Vercel addresses. Those reports relate to a shared content-delivery address used by many unrelated tenants and have been discounted, because they cannot be tied to this site and the address is recognised as legitimate provider infrastructure.

Closing Assessment

Browsing the site and making an enquiry through the contact form are reasonable. Larger financial commitments should wait until the verification steps above have been completed. Payment should be staged against delivered milestones through a method that offers buyer protection.

Signals weighed against the site

• AbuseIPDB: 82 reports on hosting IP 64.29.17.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.